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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 

Listing of Claims: 

1 . (Currently Amended) A method of controlling security of data in a 
storage system having a local disk system and a remote disk system comprising: 

in the local disk system: 

when a write of data is to be made to the local disk system retrieving a previously 
stored encryption key; 

encrypting the data; 

transferring the data to the remote disk system; then 
in the remote disk system: 

determining whether the data is to be stored in an encrypted form; 

determining an address for storage of the data in the remote disk system ; 

if the data is to be stored in a decrypted form, decrypting th e data; and writing the 
data in the remote disk system;-and 

if the data is to be stored in an encrypted form, writing the data in the remote disk 
system without decrypting the data; and 

notifying the local disk system that the step of writing the data is complete^ 

wherein the local disk system is coupled to a host computer to allow the host 
computer to access data stored in the local disk system . 

2. (Currently Amended) A method as in claim 1 further comprising a step of 
maintaining an encryption control table on the local disk system, the encryption control table 
including a list of encryption keys for selected volumes of the local and the remote disk system,, 

wherein the data transfer between the local disk system and the remote disk 
system occurring via a communication link that couples the local disk system to the remote disk 
system, so that the local disk system may send the data to the remote disk system without direct 
involvement from the host computer 
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wherein a first key is assigned to a first set of volumes in the local disk system, 
and a second key is assigned to a second set of volumes in the local disk system, each of the first 
and second set of volumes including one or more volumes . 

3. (Original) A method as in claim 2 wherein the list of encryption keys 
further includes information relating to the use and non-use of encryption on the local disk 
system. 

4. (Original) A method as in claim 2 wherein the list of encryption keys 
further includes information relating to the use and non-use of encryption on the remote disk 
system. 

5. (Original) A method as in claim 3 wherein the encryption key is 
applicable to less than all of the storage on the local disk system. 

6. (Original) A method as in claim 4 wherein the encryption key is 
applicable to less than all of the storage on the remote disk system. 

7. (Original) A method as in claim 3 wherein the encryption key is 
applicable to at least one disk on the local disk system. 

8. (Original) A method as in claim 7 wherein the encryption key is 
applicable to at least one disk on the remote disk system. 

9. (Currently Amended) A method for changing an encryption key while 
operating a storage system having a local disk system and a remote disk system comprising: 

storing an encryption key in a memory in the local disk system; 
transmitting the encryption key to the remote disk system and storing it in a 

memory there; 

in the local disk system determining a boundary for use of the encryption key; 

in the remote disk system receiving the boundary from the local disk system; 

in both the local and the remote disk system, determining a relationship of present 
operations to the boundary; 

in both the local and the remote disk system waiting for the boundary, and then 
changing the encryption key for data stored thereafter. 
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10. (Original) A method as in claim 9 wherein operations before the boundary 
are performed using a first encryption key and operations after the boundary are performed using 
a second encryption key. 

1 1 . (Original) A method as in claim 9 wherein the boundary is defined by 
counting input/output operations and using the count to define the boundary. 

12. (Currently Amended) A method for changing an encryption key while 
operating a storage system having a local disk system and a remote disk system , the method 
comprising: 

storing an encryption key in a memory in the local disk system; 
transmitting the encryption key to the remote disk system and storing it in a 

memory there; 

issuing split request splitting from the local disk system from to the remote disk 
system to allow them to operate independently; 

using a new encryption key to begin storing data in the local disk system after 
issuing the split request ; and 

using a new encryption key to begin storing data in the remote disk system after 
receiving the split request; and 

resynchronize the local disk system and the remote disk system. 

13. (Currently Amended) A method of controlling encryption in a storage 
system having a local disk system and a remote disk system comprising: 

maintaining a control table in each of the local disk system and the remote disk 

system; 

determining a boundary in the local disk system where encryption is to be 
switched to an opposite state; 

in the remote disk system receiving d e t e rmining a corresponding boundary from 
in the remote disk system; 

in both the local and the remote disk system, determining a relationship of present 
operations to the boundary; 
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in both the local and the remote disk system waiting for the boundary, and then 
changing the switching the encryption to the opposite state. 

14. (Original) A method as in claim 13 wherein operations before the 
boundary are either encrypted or not encrypted, and operations performed after the boundary are 
either not encrypted or encrypted oppositely to those operations performed before the boundary. 

15. (Original) A method as in claim 14 wherein the boundary is defined by 
counting input/output operations and using the count to define the boundary. 

16. (Currently Amended) A method of controlling encryption in a storage 
system having a local disk system and a remote disk system comprising: 

storing an encryption key in a memory in the local disk system; 
transmitting the encryption key to the remote disk system and storing it in a 

memory there; 

splitting the local disk system from the remote disk system to allow them to 
operate independently; 

switching encryption to an opposite state from a previous state after splitting the 
local disk system and remote disk system ; and 

re-synchronizing the local disk system and the remote disk system. 

17. (Currently Amended) A storage system comprising: 

a local disk system including a plurality of volumes of media for storing dataf 4 
said local disk system being coupled to a host computer to enable the host computer to access 
said volumes; 

a remote disk system including a plurality of volumes of media for storing data; 

and 

a first comput e r program op e rating on th e local syst e m to d e t e rmin e wh e th e r 
e ncryption is to b e e mploy e d in storag e of data on th e local syst e m, and if so, r e tri e ving an 
e ncryption key from storag e and using th e k e y to e ncrypt th e data to b e stor e d; 

a communications link coupling the local system to the remote system^-and * 
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wherein the local disk system determines whether encryption is to be employed in 
the data on the local disk system, and if so, encrypts the date to be transferred to the remote disk 
system, and 

wherein the remote disk system determines whether to store the data in either 
encrypted form or unencrypted form and stores the data in that form in the remote disk system, 
and notifies the local disk system that the data has been stored. 

a s e cond comput e r program op e rating on th e r e mot e syst e m to stor e th e data in 
e ith e r e ncrypt e d form or un e ncrypt e d form bas e d and storing th e data in that form in the r e mot e 
s yst e m, and notifying th e local disk syst e m that th e data has b ee n stor e d. 

18. (Original) A system as in claim 17 further comprising an encryption 
control table stored on the local disk system, the encryption control table including a list of 
encryption keys for selected volumes of the local system and the remote system. 

19. (Original) A system as in claim 18 wherein the list of encryption keys 
further includes information relating to the use and non-use of encryption on the local system. 

20. (Original) A system as in claim 19 wherein the list of encryption keys 
further includes information relating to the use and non-use of encryption on the remote system. 

21. (Original) A system as in claim 20 wherein the encryption key is 
applicable to less than all of the storage on the local system. 

22. (Original) A system as in claim 21 wherein the encryption key is 
applicable to less than all of the storage on the remote system. 

23. (Currently Amended) A storage system having a local syst e m and a 
remot e syst e m, and having changeable encryption keys, comprising: 

a local disk system; 

a remote disk system; and 

a local m e mory which stor e s an e ncryption k e y in th e local syst e m; 
a communications link connecting the local disk system to the remote disk system 
for transmitting the encryption key from the local disk system to the remote disk systemf A 
a r e mot e m e mory which stor e s th e e ncryption k e y in th e r e mote syst e m; 
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wherein a first computer program in the local disk system which determines a 
boundary for use of the encryption key; and 

wherein the remote disk system receives the boundary from the local disk system; 

and 

wherein m both the local and the remote disk system, a s e cond computer program 
for determining determine a relationship of present operations to the boundary, and changing 
change the encryption key for operations occurring after the boundary. 

24. (Canceled) 

25. (Canceled) 

26. (Currently Amended) A system for controlling encryption in a storage 
system having a local system and a remote system comprising: 

a local memory storing an encryption key in the local system; 

a communications link for transmitting the encryption key to the remote disk 
system and storing it in a remote memory there; 

a first computer program for splitting the local system from the remote system to 
allow them to operate independently; 

a switch for changing encryption to an opposite state from a previous state afte r 
splitting in the local disk system and remote disk system ; and 

a second computer program for re-synchronizing the local system and the remote 

system. 

27. (Currently Amended) A method of controlling security of data in a 
storage system having a local disk system and a remote disk system comprising: 

in the local disk system: 

receiving a data update request from a host computer connected to the local disk 
system wherein said data update request includes a location of a fist portion of the local disk 
system; 

assigning a key to a the first portion of the local disk system; 
encrypting the data stored in the first portion of the local disk system; 
transferring the encrypted data to the remote disk system; then 
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in the remote disk system: 

decrypting the data using the assigned key; and 

writing the decrypted data into a second portion of the remote disk system. 

28. (Original) A method as in claim 27 wherein the first portion comprises at 
least a volume of the local storage system and the second portion comprises at least a volume of 
the remote disk system. 

29. (Original) A method as in claim 28 wherein the first portion comprises a 
group of volumes of the local storage system, and the second portion comprises a group of 
volumes of the remote storage system. 

30. (Currently Amended) A storage system comprising: 

a local disk system including a plurality of volumes of media for storing data^ 
wherein the local disk system is connected to a host computer; 

a remote disk system including a plurality of volumes of media also for storing 

data; 

a communications link coupling the local disk system to the remote disk system, 
wherein a first comput e r program op e rating on the local disk system te retrieves 
selected data from s torag e one of the volumes on the local system, and encrypts that selected 
data using an encryption keyf , and transmits the encrypted selected data to the remote disk 
system, 

a communications link coupling th e local syst e m to th e remot e syst e m for 
transmitting th e e ncrypt e d s e l e ct e d data to th e r e mot e syst e m; and 

wherein a s e cond comput e r program op e rating on the remote disk system te 
decrypts the selected data received from the communications link and stores that selected data in 
unencrypted form in one of the volumes of media the remote system. 

31. (Original) A system as in claim 30 further comprising an encryption 
control table stored on the local disk system, the encryption control table including a list of 
encryption keys for selected volumes of the local system and the remote system. 
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